GeoAI and the Law Newsletter
Tracking Developments in AI Laws and Regulations for Geospatial Professionals
GeoAI and the Law is not legal advice. The reader should consult with a trained lawyer on legal matters associated with GeoAI.
What You’ll Learn This Week
Why the geospatial community does not need to reinvent “trust” for GeoAI — the same laws, regulations, and contracts that underpin food safety, driving, and building codes already offer the template
How the EU AI Act’s August 2 GPAI enforcement deadline puts geospatial foundation models on the clock for model documentation, training-data summaries, and copyright policies..
What’s New
European Commission Receives Final Version of General-Purpose AI Code of Practice (IAPP)
Obligations for general-purpose AI (GPAI) model providers under the EU AI Act, in force since August 2, 2025, take another big step August 2, 2026, as that is when the AI Office gains full enforcement powers (including fines of up to 3% of global annual turnover or €15 million). The voluntary GPAI Code of Practice (published July 10, 2025) expects providers to maintain technical model documentation, publish a summary of training-data content, respect rightsholders’ reserved rights and opt-outs, and share information with downstream developers.
Authors Have Mixed Feelings About the $1.5B Anthropic Copyright Infringement Ruling (NPR)
A federal judge has approved a roughly $1.5 billion settlement between Anthropic and a class of authors who alleged the company pirated their books to train its Claude models. It is the largest AI copyright settlement to date, with payment of about $3,000 for each of some 465,000 works. The settlement follows Judge William Alsup’s June 2025 ruling in Bartz v. Anthropic, which found that while training AI on copyrighted books can be transformative fair use, downloading those works from pirate sites to build a permanent library is infringement.
Deep Dive
No Need to “Reinvent Trust”
There is a good deal of discussion within the geospatial community about building trust when it comes to GeoAI. But the discussions often fail to include the critical role that laws, regulations and contracts will play in building this trust.
When I wake up in the morning and make myself breakfast, I don’t “trust” the farmers who grew the food or the companies that process, ship, or sell it. Rather, I expect that they comply with food safety laws and regulations, that their contracts and insurance policies require that compliance, that regulators inspect the food supply chain and fine or shut down violators, and that lawsuits will follow if those laws or contracts are broken.
When I drive my car to work, I don't "trust" the other drivers on the road, the manufacturers that built our vehicles, or the crews that paved and maintain the streets. I trust that drivers are licensed, insured, and required to follow traffic laws, and that vehicle manufacturers must comply with extensive safety standards. I also trust that auto insurance policies require compliance with applicable driving laws. I trust that government regulators and law enforcement conduct inspections, enforce traffic laws, and revoke licenses or impose fines on those who violate them. And I trust that lawsuits will be filed-and insurance claims paid-if a driver or manufacturer causes harm by breaking those rules.
When I enter my office building and ride the elevator, I don't "trust" the building owner, the construction company that built it, or the technicians who maintain the elevator. I trust that the building was constructed and is maintained in compliance with fire, safety, and building codes, and that the elevator is regularly inspected and certified under applicable safety regulations. I also trust that the owner's and maintenance company's insurance policies require this compliance. I trust that government inspectors audit these systems and can fine or shut down any building or elevator that fails to meet code. And I trust that lawsuits will be filed if the owner or maintenance company is negligent and someone is injured.
Conclusion
As this newsletter has tried to illustrate, a growing body of legal, regulatory, and contractual developments in AI is already shaping the geospatial community. On the regulatory side, frameworks such as the EU AI Act, the NIST AI Risk Management Framework, and emerging state-level statutes are establishing baseline obligations around transparency, risk assessment, and accountability for AI systems, including those that process geospatial data. On the contractual side, vendor and customer agreements increasing address issues that are relevant to GeoAI, including data provenance and licensing restrictions on training data, ownership and permitted use of AI-generated outputs, allocation of liability for positional or classification errors, and audit and reporting rights to verify compliance with applicable laws and standards.
One way for the geospatial ecosystem to build trust in GeoAI, consistent with how trust is built in other industries, is to show that are complying with these legal and regulatory requirements. Another is to incorporate the relevant contractual terms into their vendor and customer contracts. The geospatial community does not need to redefine “trust”: it can simply apply lessons learned from other domains.
Edited by Kevin Pomfret
Partner at Pierson Ferdinand, Author of Geospatial Law, Policy and Ethics: Where Geospatial Technology is Taking the Law | LinkedIn